Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa
File: yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa (raw, json)
Hash identifier: 9lzUExWqudI5IZaHPGACvDV+UoMVt4hmvKdyWsLEU8s=
Subject key identifier: C8:73:FD:10:67:4B:8C:3A:EA:74:08:0A:D2:04:A0:91:F3:98:74:31
Certificate issuer: /CN=c3bd26fe2295e462be2678533efa531e23b7f102
Certificate serial: 01941F8C772975B48D48781C1050EB772855
Authority key identifier: C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa
Signing time: Wed 01 Jan 2025 01:48:06 +0000
ROA not before: Wed 01 Jan 2025 01:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12552
IP address blocks: 91.208.188.0/24 maxlen: 24
2001:67c:43c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:77:29:75:b4:8d:48:78:1c:10:50:eb:77:28:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3bd26fe2295e462be2678533efa531e23b7f102
Validity
Not Before: Jan 1 01:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c873fd10674b8c3aea74080ad204a091f3987431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ce:57:96:75:67:b7:85:0b:0e:49:62:97:41:
7b:5b:de:c5:54:03:6d:47:cd:f3:47:18:8e:2d:6e:
04:65:19:96:32:e3:37:34:40:99:5e:ae:f8:3e:a5:
8e:0c:6d:34:81:53:85:6e:77:12:f7:3b:ad:c6:11:
9a:73:46:9b:4c:3c:e1:2b:1e:6f:28:5e:4a:9d:55:
66:44:e3:b7:40:ce:91:7d:a3:a9:17:d8:b8:3c:c4:
f2:07:31:82:6b:bf:56:8c:fe:c8:ab:db:27:a2:3f:
ce:65:f8:ee:a7:ad:f8:33:35:03:04:a4:bc:26:2c:
d4:fa:64:29:e6:d0:a1:16:40:25:cc:57:d0:15:8e:
a3:f4:c9:8d:dc:ff:59:66:74:c1:4b:2d:b9:97:25:
b1:4f:31:6f:30:1c:5c:45:63:09:76:db:1e:d0:c3:
7f:d0:1a:f3:ef:cc:0e:c3:0e:1c:2c:a4:c4:c1:4f:
13:79:a1:ae:94:46:fb:46:de:b9:a2:73:2b:fe:ee:
f4:2c:36:cb:cf:cf:51:cd:e3:1c:4b:f5:d1:a1:46:
39:0a:96:e5:41:77:bb:a7:a3:65:d9:0c:0c:40:f6:
cc:db:83:79:32:99:e9:12:db:36:0e:bb:67:2a:c8:
2b:43:65:0b:9a:98:80:ac:ae:65:9b:bd:f1:30:9c:
9b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:73:FD:10:67:4B:8C:3A:EA:74:08:0A:D2:04:A0:91:F3:98:74:31
X509v3 Authority Key Identifier:
keyid:C3:BD:26:FE:22:95:E4:62:BE:26:78:53:3E:FA:53:1E:23:B7:F1:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w70m_iKV5GK-JnhTPvpTHiO38QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/yHP9EGdLjDrqdAgK0gSgkfOYdDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/9c5a00-0b5f-4a95-98a8-8bd976910dbf/1/w70m_iKV5GK-JnhTPvpTHiO38QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.188.0/24
IPv6:
2001:67c:43c::/48
Signature Algorithm: sha256WithRSAEncryption
44:a4:57:c4:8b:ba:ce:a5:51:f4:e4:a2:e4:c6:51:76:89:d8:
ff:a8:c2:fa:4f:8d:32:92:61:4e:db:60:26:e3:62:9e:eb:28:
fa:be:ac:b0:cf:f9:1b:bd:fd:08:7c:bd:2c:37:21:a8:d4:64:
5d:ad:c1:c2:56:d1:5d:15:71:f2:d1:b3:7c:29:b9:91:1a:61:
d4:21:e6:68:cb:06:ae:d6:77:bb:f2:36:5f:3c:03:21:3d:36:
2c:ae:c6:22:4c:a0:21:6e:35:11:bc:d9:9f:c2:34:be:8c:2c:
ad:35:1d:5c:eb:34:c2:62:cd:8d:29:af:85:bc:41:fe:cd:c1:
3f:13:14:64:a2:65:ef:1e:89:36:9c:b1:8a:a8:19:d8:0f:dc:
30:b3:95:38:06:64:b3:27:16:1a:56:4d:52:8b:76:b8:95:d5:
3d:c9:14:11:34:77:59:cd:28:95:29:c7:cb:5d:ec:58:70:e6:
ac:59:dd:3b:cb:34:7e:f7:e6:cd:75:63:65:58:5d:a6:d2:e4:
ef:39:78:fe:61:48:46:a2:b7:07:5f:ff:73:d3:e2:2a:bf:73:
2a:43:3d:65:4c:1c:ad:4b:e6:79:55:dc:81:63:68:9d:2e:f3:
4e:b3:a8:f7:95:3a:f8:75:47:f3:58:f3:93:5d:38:35:86:db:
6a:f4:38:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:17:27 2025 by rpki-client